vdr penetration testing